$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer (raw, json) Hash identifier: DR9zFZA1aDdfeflsJJVjDpYR9mKKsDdahmD0XN7NVpY= Subject key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 052E1DCC4CDDE637E1D34BC44C2D382D83587A4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft caRepository: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 25 Feb 2026 22:22:54 +0000 Certificate not after: Wed 24 Feb 2027 22:27:54 +0000 Subordinate resources: IP: 61.29.252.0/23 IP: 103.130.198.0/23 IP: 117.103.116.0/24 IP: 160.20.222.0/24 IP: 2407:14c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2e:1d:cc:4c:dd:e6:37:e1:d3:4b:c4:4c:2d:38:2d:83:58:7a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 25 22:22:54 2026 GMT Not After : Feb 24 22:27:54 2027 GMT Subject: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:7c:05:4b:9c:56:b1:d0:04:b6:63:90:c0: 24:ea:42:22:cf:2d:83:91:72:38:6b:c6:18:a9:6a: 02:dc:d8:07:f4:b4:be:a6:f7:32:14:7b:fe:e8:d0: 29:09:7d:b4:b2:85:9b:c8:09:96:4f:9b:44:e1:aa: 4b:18:c4:ec:be:93:4e:01:0a:47:30:9f:73:28:61: a1:db:05:32:d5:cf:9c:46:63:c8:8c:30:c2:7e:61: 6d:1b:d3:2f:a0:53:d5:b6:e3:df:5f:45:0e:c4:ae: d1:aa:f2:b2:9d:b4:06:cb:b2:50:99:ae:a8:aa:e1: 1c:2b:42:92:7e:d6:8f:11:38:8e:58:15:03:d2:d7: 30:fd:f5:2e:ef:5d:cc:d4:54:ed:fe:75:17:e0:20: bd:83:05:ec:b4:d2:41:31:ab:6c:45:d6:9c:e8:0e: 15:8b:e0:70:bd:40:44:6d:f4:05:e8:36:11:1e:d5: 12:3b:69:eb:e9:5a:75:8c:b1:66:ec:b9:77:b8:35: c1:01:be:f3:7c:0f:f3:a4:42:b0:32:e2:7d:10:9d: 8c:c5:f2:3d:e2:05:dc:35:8d:cf:57:7a:27:ca:b4: 81:7f:62:b9:9d:38:be:8e:4d:f9:f5:1d:8c:85:e6: 75:92:36:3a:5e:53:43:35:94:25:ad:be:99:c1:05: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.29.252.0/23 103.130.198.0/23 117.103.116.0/24 160.20.222.0/24 IPv6: 2407:14c0::/32 Signature Algorithm: sha256WithRSAEncryption 64:7b:d5:b8:b5:12:f5:bf:3b:33:42:a9:9d:6f:1b:17:e4:92: 56:34:b0:69:49:b0:88:d8:ec:71:b6:0b:11:6d:67:cd:f2:9f: 25:41:6f:70:04:31:a1:9c:0a:66:04:af:72:bf:33:44:30:95: 06:68:02:a1:2a:27:c0:86:3f:28:fd:1a:8b:ce:6b:3d:31:72: 9e:ea:48:e7:22:aa:8c:13:4e:de:12:09:f4:b6:a6:4e:cd:06: e2:30:d8:7b:44:1f:2a:23:b4:1c:47:07:64:8d:c9:a7:a1:95: 34:78:2e:de:92:e4:b6:3f:ba:05:fc:06:33:d4:94:f0:be:a7: 6e:35:ae:77:74:9c:9b:3e:78:45:a8:e4:ff:20:39:80:16:6e: dd:7b:3b:8a:e7:4a:18:4b:73:31:80:d2:61:11:d1:71:5c:63: bb:3d:f6:06:fb:a4:6d:b8:ad:44:ce:0d:3d:54:f2:7a:f8:f1: e3:3e:cd:63:7f:4b:d4:7a:d6:9b:61:7e:42:f1:20:ea:42:85: 4b:34:1d:07:1e:84:d3:a7:17:e5:4f:60:56:c5:06:3c:4d:e9: b0:fd:87:0d:3e:4c:7d:d1:01:be:a5:e3:21:f0:4e:eb:2d:50: c8:0a:88:9b:de:5d:a7:83:e4:6c:25:f1:9e:4d:39:67:e7:f1: 4b:fa:f9:cf -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUBS4dzEzd5jfh00vETC04LYNYekowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNTIyMjI1NFoX DTI3MDIyNDIyMjc1NFowMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhF RjE1MUYxNzlCODU3RTkzNzZFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALW7fAVLnFax0AS2Y5DAJOpCIs8tg5FyOGvGGKlqAtzYB/S0vqb3MhR7/ujQ KQl9tLKFm8gJlk+bROGqSxjE7L6TTgEKRzCfcyhhodsFMtXPnEZjyIwwwn5hbRvT L6BT1bbj319FDsSu0arysp20BsuyUJmuqKrhHCtCkn7WjxE4jlgVA9LXMP31Lu9d zNRU7f51F+AgvYMF7LTSQTGrbEXWnOgOFYvgcL1ARG30Beg2ER7VEjtp6+ladYyx Zuy5d7g1wQG+83wP86RCsDLifRCdjMXyPeIF3DWNz1d6J8q0gX9iuZ04vo5N+fUd jIXmdZI2Ol5TQzWUJa2+mcEF4w8CAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLh3zRxULD3iy7jvFR8Xm4V+k3bkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNmQxODVl LWQ0ZjQtNDgyMC1iNGI2LTc5OGMzMDdhZDdlNS8wL0I4NzdDRDFDNTQyQzNERTJD QkI4RUYxNTFGMTc5Qjg1N0U5Mzc2RTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD BAE9HfwDBAFngsYDBAB1Z3QDBACgFN4wDQQCAAIwBwMFACQHFMAwDQYJKoZIhvcN AQELBQADggEBAGR71bi1EvW/OzNCqZ1vGxfkklY0sGlJsIjY7HG2CxFtZ83ynyVB b3AEMaGcCmYEr3K/M0QwlQZoAqEqJ8CGPyj9GovOaz0xcp7qSOciqowTTt4SCfS2 pk7NBuIw2HtEHyojtBxHB2SNyaehlTR4Lt6S5LY/ugX8BjPUlPC+p241rnd0nJs+ eEWo5P8gOYAWbt17O4rnShhLczGA0mER0XFcY7s99gb7pG24rUTODT1U8nr48eM+ zWN/S9R61pthfkLxIOpChUs0HQcehNOnF+VPYFbFBjxN6bD9hw0+TH3RAb6l4yHw TustUMgKiJveXaeD5Gwl8Z5NOWfn8Uv6+c8= -----END CERTIFICATE-----Generated at Mon Mar 2 02:52:53 2026 by rpki-client